Jump to content

Recommended Posts

Hi, here is the guide how to flash custom recovery image for the HCL 4.140-4.150

 

Custom recovery allows to flash unsigned firmware in your HCL. This way we can add some new features or fix annoying bugs fast.

 

First of all, I want to say, the solution is 2 years old already. The security issue allows to execute any code on the HCL side. I have reported to Fibaro support about the vulnerability allowing to have complete contol of HCL device, but they answered its user's problem :)

 

We need to get root access in order to flash custom recovery, but HCL's ssh server disabled password login. So we will use the root exploit to restart ssh daemon with user:password login. Then we can use ssh to complete the process.

 

Rooting

Reboot the HCL before any manipulations, because low free RAM may prevent running the ssh daemon after killing.

We will use the Python 3 for exploit, but you can prepare the request with any convenient way. Edit hcl_4140_root.py script with your credentials and run it.

 

Writing recovery image

 

Use any ssh client (like putty) to login yout HCL using username root and password hc2

 

Copy the custom recovery image hcl_cr_v10.img to /tmp folder using ssh then run:

Quote

# dd bs=1M if=/tmp/hcl_cr_v10.img of=/dev/mtdblock8

Done! Now you can reboot recovery and enjoy the unsigned flashing.

 

hcl_cr.thumb.png.cd46892e15cd01ed9bee0c0dbddaaf81.png

 

All manipulations is at your own risk.

hcl_4140_root.py

hcl_cr_v10.img

  • Thanks 5
Link to post
Share on other sites
  • 6 months later...
  • Replies 80
  • Created
  • Last Reply

Top Posters In This Topic

Top Posters In This Topic

Popular Posts

Hi, here is the guide how to flash custom recovery image for the HCL 4.140-4.150   Custom recovery allows to flash unsigned firmware in your HCL. This way we can add some new features or fix

BTW, good news for HC2 owners: HC2 NewOS recovery already has "signature ignore" mode and we can use stock recovery to flash custom firmwares. To enable it, need to create a file "/mnt/nvm/i

HomeKitten v1.7 changelog: Room bridge added. Every room is now separate bridge accessory. Device naming changed because we adding one room same time, so no more mess with names. Max bridges (ro

Posted Images

  • 2 weeks later...
  • 2 weeks later...

how you implemented fibaro rooms support? cuz dy default homekit all device assigned to single room 

Link to post
Share on other sites

homekit rooms have nothing to do with fibaro rooms

u can manage rooms from Home app, but manually for every accessory

Groping devices by rooms required to bypass homekit limit to 100 accessories per pridge

Link to post
Share on other sites

Added support for actors and sensors

Weather sensors and thermostats will do later

Today is the test run day on the HCL device (before was running on x86 pc)

I hope all will be ok

Link to post
Share on other sites

HCL 4.560 with HomeKit support built-in

Probably, it will not support all of your devices, but its a good start ;0

Setup code for the bridge acessory:

homekitten.png.1f718c062beed30ba9631160e770e8bc.png

Enjoy it

 

 

 

Edited by jack.daniels
Reuploaded the image
Link to post
Share on other sites

Some details:

-instant events polling. once your device changes state it will report to the home app immediately (not once in X seconds)

-low battery warning for battery powered sensors (under 20% hardcoded)

-weather providers support (home app will see temperature and humidity)

-real voice control is now covers your fibaro hcl controller

-lightweight service binary ~300kb still leave enough ram to run HCL in usual way including LUA environment 

-zero configuration time, it just works after power on

-after adding new devices you need to re-add the bridge accessory in home app, so best practice will be to connect homekit in the last turn

 

Link to post
Share on other sites

Can you see how much is the size of the partition of users can save data?

i think if it could reserve some space to do swap...

I’m not a Linux expert... 😆 

Link to post
Share on other sites
On 10/19/2019 at 3:21 PM, NunoMartins said:

Can you see how much is the size of the partition of users can save data?

Yes, but swap is disabled in kernel, so its useless to resize partitions etc

Link to post
Share on other sites

Small update is ready. Homekitten v1.3

-Tamper status reporting in Home app

-Room devices grouping is now enabled automatic, only when devices>100

-Device name in format: "<name> - <room_name>" for non-grouped mode (easier to sort out the mass of items)

-Memory leak fixed

 

Still problem adding attachments here, so here is the link

 

Edited by jack.daniels
  • Thanks 2
Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...